Behavioral task
behavioral1
Sample
f8640f4525d705bcb6121cacfeebfdca_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f8640f4525d705bcb6121cacfeebfdca_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f8640f4525d705bcb6121cacfeebfdca_JaffaCakes118
-
Size
393KB
-
MD5
f8640f4525d705bcb6121cacfeebfdca
-
SHA1
765db1f9f729f67dc1e93131e283639590bd6550
-
SHA256
342b0b08cef5bdd7e96a27bbb54bc3cc126feebe77bacae3b43d0fd9b2e7f7d3
-
SHA512
cd7e58e4b4146906719b2dadca39f243d91a974d2d91428e67fc50d7d1fbe9053f7259f1d7a1905bfbecfa18befb3952b41b46e042caa5acbde8c258f97fa5f3
-
SSDEEP
6144:hGyG34TcbC4RSA+8/e5ocjZl5ZVBWkpzPUioGiFtKBmQSLkgEuKS3BlSI:h3M4T+DTnMZKkpzPPhcKIQOkS3Bx
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8640f4525d705bcb6121cacfeebfdca_JaffaCakes118
Files
-
f8640f4525d705bcb6121cacfeebfdca_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE